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Abstract. We study, from a constructive computational point of 
view, the techniques used to solve the conjugacy problem in the 
"generic" lattice-ordered group Aut(M). We use these techniques 
in order to show that for all f,g G Aut(M), the equation xfx = g 
is effectively solvable in Aut(R). 



1. Introduction 

The conjugacy problem. Elements gi and §2 in a group G are con- 
jugate if there exists h E G such that gi = h~^g2h. The conjugacy 
problem for a given group G is the question whether there exists an ef- 
fective procedure to determine whether gi and g2 are conjugate, given 
arbitrary (72 ^ G. 

This problem is of significant theoretical interest, but recently it 
became extremely important from a practical point of view. In [2j and 
[To] , a family of cryptosystems was suggested, whose strength heavily 
depends on the intractability of variants of the conjugacy problem in 
the underlying group. It seemed that for G = B^, the Braid group with 
n strands, the goal of achieving a secure cryptosystem was reached, but 
recent results [H El E] suggest that Bn is not a good candidate and the 
search for a better group has revived. 

Lattice-ordered groups. A partially ordered group is a group G en- 
dowed with a partial ordering < which is respected by the group op- 
erations, that is, for each gi,g2 € G such that gi < g2, xgi < xg2 and 
dix < g2X for all X E G. If the underlying partial order < on G is a 
lattice (that is, for each gi,g2 G G there exists a least upper bound 
S'l V (72 G G and a greatest lower bound gi A g2 E G) , then we say that 
G is a lattice- ordered group. 

If G is a lattice-ordered group, then the lattice operations distribute 
over each other, and the group operation distributes over the lattice 
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operations, too. Consequently, any element in a lattice-ordered group 
generated by {xi, . . . , x„} can be written in the form 



where each expression Uij{xi, . . . , Xn) is an element of the free group on 
{xi, . . . , Xn}- The form above for w{xi, . . . , Xn) is not unique. In [9], 
an algorithm was given to determine whether two given expressions of 
this form represent the same element of the free lattice- ordered group 
¥n (and, therefore, the same element in every lattice-ordered group G). 

Let Aut(]R) denote the collection of all order preserving bijections 
/ : M R, that is, order automorphisms of M. Observe that each 
/ G Aut(M) is continuous. Aut(M), with the operation of composition, 
is a group which is lattice-ordered by: 



for each x G M. In 1963, Holland proved that every lattice-ordered 
group can be embedded in the lattice-ordered group Aut(f2, <) of au- 
tomorphisms of a totally ordered set {fl, <). This is discussed in detail 
in section 7.1 of [6]. A particular case of this theorem is, that the free 
lattice-ordered group F„ can be embedded in Aut(M). Consequently, 
Aut(M) satisfies a given equation w{xi, . . . , x„) = u{xi, . . . , Xn) if, and 
only if, every lattice-ordered group satisfies this equation. 

Parametric equations. Because of the generic nature of the lattice- 
ordered group Aut(M), it would be interesting to know which elements 
of this group are conjugate. A simple conjugacy criterion was given in 
[8]. In Section 2 we analyze this treatment of the conjugacy problem 
in Aut(M) from a computational point of view, and show that in fact, 
there exists an effective definition of the conjugator when the given 
elements are conjugate. The conjugacy problem in Aut(M) is a specific 
case of an equation with parameters from Aut(M). Thus, a natural 
extension of the conjugacy problem in this group is, which equations 
with parameters in Aut(]R) have solutions in Aut(M). We solve several 
problems of this type in Section 3. In particular, we show that every 
element of Aut(]R) is a commutator (that is, for each g G Aut(R) there 
exist x,y & Aut(M) such that x~^y~^xy = g), and that the equation 
xfx = g is effectively solvable in Aut(]R). 




f < 9 if f{x) < g{x) for all x eR. 
The lattice operations are defined by 



(/V^)(a;) = max{f{x),g{x)} 
(/A^)(x) = mm{f{x),g{x)} 
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Effectiveness. When dealing witli parametric equations in Aut(M), 
we use the following natural model of computation: The parameters 
appearing in the equation are treated as "black box" functions, that 
is, the allowed operations in our model are evaluation of any of the 
parameters at any desired point in M, as well as the basic arithmetic 
operations (addition, subtraction, multiplication and division), and any 
(finite) composition of these. 

Moreover, we consider the basic arithmetic operations as computa- 
tionally negligible. Thus, in this model, a solution to a given paramet- 
ric equation (that is, well defined elements of Aut(M) which satisfy the 
equation when substituted for the variables) is effective if its evalua- 
tion at each given point requires only finitely many evaluations of the 
functions appearing as parameters in the equations. 

Notational convention. For the rest of this paper, we use the convention 
that the functions are evaluated from left to right, that is, the value of 
5^ at a is ag and the value of gf at a is agf — {ag)f. 

2. The conjugacy problem 
For g e Aut(R), let 

Supp(^) = {a e ]R : a ^ ag} 
Supp'^(^) = {a e ]R : a < ag} 
Supp~"(^) = {a e ]R : ag < a} 

Then Supp^(5f) and Supp~(5f) are disjoint open subsets of R, and 
Supp(5') = Supp''"(5') U Supp~(^). Consequently, Supp(5') is a disjoint 
union of open intervals (the components of Supp((5f)), where each in- 
terval is a component of either Supp^(5f) (a positive component) or of 
Supp~(5f) (a negative component). 

We now describe a useful method to obtain a partition of a compo- 
nent of Supp(5') into a sequence of half-open intervals. Suppose / is 
a positive component of Supp((/) and a G /. Then a < ag. As g is 
order preserving, we have that for all i e Z, ag^ < ag'^^^. Let /' be the 
convex hull of {ag^ : i e Z}, that is, 

r = [j[ag\ag^+'). 

Then /' C /. Moreover, V g = V . If /' has an upper bound, then it 
has a least upper bound 7, and lim„^(x, ag^ = 7. ks, g is continuous, 
^g — 7, and so 7^/. A similar result holds if /' has a lower bound. 
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Therefore, /' = /. Similarly, for each negative component / of Supp((7) 
and each a E I, 

I = [j[ag'-'\ag'). 

The following lemma is an extension of the corresponding lemma 
from [H]. Recall that if a lies in a positive component of a function g, 
then a < ag, and the function ip in the following lemma is well defined. 

Lemma 2.1. Let f,g E Aut(]R), let I be a positive component of 
Supp(/) and J be a positive component of Supp(5f). Fix elements 
a E I and jS E J . Define the usual affine order preserving bisection 
iIj : [a,ag) [/?,/?/) by 

jip = (7 - a) + p. 

ag — a 

The following procedure defines an order preserving bisection x : I —>■ J 
such that on J, f = x~^gx, by defining its evaluation on a given 7 G /; 

(1) If ^ > a, compute ag, ag'^, . . . until the first positive integer i 
such that ag^ < 7 < ag'^'^^ is found. 

(2) 7/7 < a, compute ag~^, ag~^, . . . until the first negative integer 
i such that ag^ < 7 < ag^~^^ is found. 

(3) Compute jx := 75'~V/* fno-king i evaluations of g^^, one 
evaluation ofij), and i evaluations of f . 

A similar result holds in the case that I and J are negative components. 
Proof. Let a E I, (3 E J. We may assume a < ag and (3 < (3f. 

I = [j[ag\ag'+^) 

and 

J=[_\[Pf\M'^')- 

Let -0 : [a,Q!5'] [[3,(3g\ be the order preserving bijection defined 
above. For each i eTj define an order preserving bijection Xi : [ag^, ag"^^^) 
[/3f\(3f^+')hj 

Xi = g-'ipf, 

and take x = IJigz Then x : J — ^ J is an order preserving bijection, 
and if < 6 < then ag' < 6x~^ < ag^'^^. Therefore, 

6x-^gx = 5x-^gg-^'+^^f'+^ = 

= 6x-^g-'ijf'+^ = dx-^xf = 5f. 

□ 
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The following is obvious. 

Lemma 2.2. Let I and J be nontrivial maximal intervals of fixed points 
of f and g, respectively. 

(1) If I = [ai,a2] o^nd J = [(3i,P2], define 

ip : [ai,a2] [/5i,/32] 

as in Lemma \2. 1\ 

(2) If I = {—00,02] and J = (— oo,/32], define 

ip : (-00, a2] (-00, /92] 

by ji/j = J - a2 + (32; 

(3) If I = [ai,oo) and J = [Pi, 00), define 

tjj : [ai,oo) [Pi, 00) 

by jtp = -J - ai + Pi; 

(4) IfI = R= J, define 

by 'ji/j = 7. 

Let X = ip. Then x : I ^ J is an order preserving bijection such that 
on J, f = x~^gx. 

The computational complexity in Lemmas 12.11 and |2 . 21 is unbounded, 
but the procedure requires only finitely many steps. For each given 7, 
the computational complexity of the evaluation of jx can be reduced 
from i (as defined there) to the order of logj i if we work in the fast 
forward model, where the computational complexity of evaluating g^ 
and /* is independent of i (this model was studied in another context 
in [mill]). In this model, step 3 of the procedure requires a negligible 
amount of time, and step 1 can be accelerated by first finding the first 
n such that 0(7^" < 7 < ag'^"^ and continuing this binary search in 
the interval [ag"^" , a^f^"^^) in a nested manner. 

Definition 2.3. For an element g G Aut(]R), let F(g) be the set of 
nontrivial maximal intervals of fixed points of g, let P{g) be the set of 
positive components of Supp(g'), and let N{g) be the set of negative 
components of Supp(5f). The set T{g) = P{g) U N{g) U F{g) inherits a 
total order from M. We call T{g) the terrain of g. 

Following is a simple characterization of terrains. 

Lemma 2.4. Assume that g G Aut(M). Give the elements of F{g) the 
color 0, the elements of P{g) the color +, and the elements of N{g) the 
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color — . Then the terrain T{g) is a countable {0, +, —}-colored totally 
ordered set such that no two adjacent points are both colored 0. 

Conversely, any countable {0 ,+,—}- colored totally ordered set such 
that no two adjacent points are both colored is the terrain of some 
element g G Aut(]R). 

Proof. T{g) is countable because the component intervals and the max- 
imal nontrivial fixed point intervals are all disjoint, and each contains 
a rational number. No two adjacent intervals are both fixed point in- 
tervals, as this would contradict the maximality. 

Conversely, if T is a countable {0, -|-, — }-colored ordered set, let Q 
be the set of rational numbers with the usual order and let = T x 
Q be the lexicographically ordered product. Then is a countable 
ordered set without end points, and so S is isomorphic Q, and hence the 
Dedekind completion of S is isomorphic to the real line M. Under the 
isomorphism, for each t & T, the Dedekind completion of the interval 
{t} X Q is isomorphic to an interval of the form {t} x M, and we can 
define g G Aut(M) so that if t has color +, then (t, x)g = {t,x+ 1), and 
if t has color — , then {t, x)g = (t, x — 1), and g fixes all other points of 
the Dedekind completion of S. Then the terrain of g is isomorphic to 
T. □ 

Definition 2.5. An isomorphism of terrains Ti and T2 is a color- and 
order-preserving bijection from Ti to T2. If there exists such an iso- 
morphism then we say that Ti and T2 are isomorphic. 

Theorem 2.6. Two elements g, f & Aut(M) are conjugate if, and only 
if, T{f) is isomorphic to T{g). Moreover, if an isomorphism ofT{f) 
and T{g) is given (as a "black-box" function), then there exists an ef- 
fective procedure defining an element h G Aut(M) such that f = h~^gh. 

Proof. It is clear that if C G T{f) is a component of /, and h G Aut(M), 
then Ch G T{h~^fh) is a component of h~^fh of the same "color". 
Hence, conjugation by h induces an isomorphism of the terrains T(/) = 
T{h~^fh). Conversely, if we are given an isomorphism r : T{f) = T{g) 
of terrains, then for every component I = C & T{f), and J = Cr G 
T{g), we have that I and J satisfy the conditions of Lemmas 12 . 1 1 or fI72\ 
Since the union of all of the components of any element of Aut(M) is a 
dense subset of M, if x is defined on each of the intervals as in Lemmas 
12. II and [2.21 there is a unique extension to an element h G Aut(R), and 
the theorem is proved. □ 

Of course, T{f) may typically be infinite, but for a large class of 
elements, it is finite. For example, there are exactly three (isomor- 
phism classes of) one-element terrains, and thus three conjugacy classes 
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of the corresponding members of Aut(]R). There are exactly 8 two- 
element terrains, and so 8 conjugacy classes of corresponding elements 
of Aut(R). And there are exactly 22 three-element terrains, etc. 



3. Other parametric equations 

The conjugacy problem in Section 2 can be expressed in the following 
way: Given parameters gi, g2, does there exist a (73 G Aut(R) such that 
gi^g^^g2gz = e? The general problem is this: given a lattice-ordered 
group G and an element 



w{Xi, . . . ,Xn) = f\\J Uij{xi, . 



of the free lattice-ordered group on {xi, . . . 

and elements gi, . . . , gu-i G G, do there exist elements gk, . . . ,gn G G 
such that w{gi, gk-i,gk, . . . , gn) = e7 

Another special case of this is when there is only one parameter, 
and it occurs only once. This was solved (modulo the effectiveness 
assertion) in the following theorem and corollaries in [T]. 

Theorem 3.1. Let w{x2, ■■■,Xn) be a group word (not involving the 
lattice operations, and let g G Aut(]R). Then there exists an effective 
proceedure defining g2, ■■■,gn £ Aut(]R) such that g = w{g2, ■■■,gn)- 

Proof. We define the functions gi {i = 2, ... ,n) on each component / 
of Supp((y'), and then patch the results together. Let / be a component 
of Supp(5'), say, a positive component. Choose any a G /. Then, as 
shown in the previous section, a < ag and {ag^} is unbounded above 
and below in /. 

We may write the equation w{x2, . . . , Xn) = in the form 

/ X _ e(2) e(m) _ 

W[X2, . . . , Xn) — Xcr{l)^cr{2) ' ' ' ^cr{m) ~ 9i 

where a : {1, . . . , m} — {2, . . . , n}, and e{i) = ±1, and we may assume 
that the left-hand side is in reduced form, that is, x^^^^^^-^ 7^ •'^a-li) ■ 

Let ■ ■ ■ < (3i < Pi^i < ■ ■ ■ be any sequence of points of / which has 
no upper or lower bound in /. In each interval choose points 

A = 7i,0 < 7i,l < • • ■ < li,m = 

For each a{j) with < j < m we can define an order preserv- 
ing bijection (/^-(j) G Aut(M) such that for each z G Z and each j, 

'fij-igl^l-) = and 7^(j) is affine on each of the intervals [^i,k-i,'~1i,k]- 
We have that (3iw{g2, • . • ,gn) = A+i for sach i. We do not neces- 
sarily have that w{g2, ■ ■ ■ , gn) = 5', but we do have that J is a positive 
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component of 'w{g2, ■ ■ ■ ,gn)- Therefore, by Theorem 12.61 there is (an 
effectively computable) y G Aut(M) such that on / 

w{.y~^92y, • • • , y~^9ny) = y'^wi92, • • • , 9n)y = 9- 

We do this on each component, letting all x's be e on each fixed point 
of g, and patch the results together, and the theorem is proved. □ 

Corollary 3.2. Every element g G Aut(M) is a commutator. 

Proof. Take g = x^^y^^xy. □ 

Corollary 3.3. Every element g G Aut(M) has an nth root for each 
positive integer n. 

Proof. Take g = x^. □ 

Let us now consider the case of two parameters, but only one variable. 
Two special cases of this are considered in the next theorem. 

Theorem 3.4. Lete{i) = ±1, and consider the equation x"^^^^ gx"^^^^ f~^ = 
emAut(]R). Then: 

(1) //e(l) = — e(2), then the equation has a solution if and only if 
T{f) = T{g). 

(2) //e(l) = e(2), then the equation has a solution for all f,g. 

Moreover, when these equations have solutions, they have effectively 
defined solutions. 

Proof. (1) This is Theorem 12. 6[ 

(2) We write the equation in the form xgx = f. Since f^^{fg)f = 
gf, by Theorem 12.61 T{fg) = T{gf). In particular, if / is a component 
of Supp(/(7), then // is the corresponding component of Supp(5'/). 
Suppose, for example that fg is positive on /. Then gf is positive on 
//. Choose a & I. Then 

■■■ <a< afg < a{fgf <■■■ 

is unbounded in I. It follows that 

■ ■ ■ < afigf)-^ = ag-^ < af < af{gf) < ■■■ 

is unbounded in //. Choose (3 & If so that ag^^ < (3 < af. Then 

■■■<a<Pg< a{fg) < (3g{fg) < a{fgf < (3g{fgf <■■■ 

and 

■■■</?<«/< P{gf) < afigf) < ^{gff < af{gff <■■■ , 

and each of these sequences is unbounded in the corresponding com- 
ponent. 
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Let ip : [a,(3g) — > [13, af) be any order preserving bijcction between 
the real intervals, for example the afhne one. We now define an order 
preserving bijection a; :/—>// by extending in the following way. 
For 7 e /: 

^ / lifgy'HgfY, if ^fgY <i< PgifgY 
^ I i{fg)-'g-'r'f{gfy, a WgY < 7 < o^ifgY^'- 

Then x is, indeed, an order preserving bijection of / onto //. And on /, 
xgx = f because: if a{fgY < 7 < Pg{fgY then 7a; = l{fg)~'il^{gfY, 
and so 

PigfY = o^ifgYifgVi^igfY <i^< MgYifgV^igfY = o^figfY 

and so 

mgY = PigfYg < i^g < ocf{gfYg = ^ifgY^' 

which implies 

jxgx = {lx)g{fg)-'g-^il)-^f{gfY 

= Wgr^{gfY)gUgrg'''r'ngfY 
= lUgYVgYf 
= 7/; 

and in the other case, (3g{fgy < 7 < Ci{fgy^^, so 7a; = j{fg)~^g~^ip~^f{gfYj 
whence 

cyfigfY = WgYUgrg-'r'f{gfY 

< 72; 

< o,Ugr^\fgrg-'r'f{gfY 
= PigfY^', 

from which follows a{fgy~^^ < ^yxg < /3g{fgY^^: and hence 

^xgx = Mgifg)-^'+Mgfy^' 

= (7(/^)-^5-V-V(5/)05(/ff)-^^+'V(5/)^+' 
= 7(/5)-^^-'(^/)^+' 
= 7/- 

Repeating this process on each of the components of Supp(/5') (and 
defining a; = / on the fixed points of fg), produces an a; e Aut(lR) such 
that a;5'a; = /. □ 
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